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Abstract. We study ternary monomial functions of the form f(x) = Tr n (oa; ), where x £ F311 
and Tr n : ¥31% — » F3 is the absolute trace function. Using a lemma of Hou [IT] . Stickelberger's 
theorem on Gauss sums, and certain ternary weight inequalities, we show that certain ternary 
monomial functions arising from [12] are weakly regular bent, settling a conjecture of Helleseth 
and Kholosha [15]. We also prove that the Coulter-Matthews bent functions are weakly regular. 



1. Introduction and Summary of results 

Let p be a prime, n > 1 be an integer. We will use ¥ p n to denote the finite field of size p n , 
and F*„ to denote the set of nonzero elements of ¥ p n. Let / : ¥ p « — > ¥ p be a function. The 
Walsh (or Fourier) coefficient of / at b 6 ¥ p n is defined by 



s f (b) = 2_ - 



n} f(x)-Tv n (bx) 



2ni 

where Tr n : ¥ p n — > ¥ p is the absolute trace function, u> = e v is a primitive complex pth root 
of unity, and elements of F p are considered as integers modulo p. In the sequel, S a (b) is also 
used to denote the Walsh transform coefficient of a function that depends on parameter a when 
it is clear from the context which function we mean. The function / is said to be a p-ary bent 
function (or a generalized bent function) if all its Walsh coefficients satisfy 

\Sf(b)\ 2 = P n . 

A p-ary bent function / is said to be regular if for every b G F p « the normalized Walsh coefficient 
p~zSf(b) is equal to a complex pth. root of unity, i.e., p~zSf(b) = u>^*^ for some function 
/* : ¥ p n — ► F p . A bent function / is said to be weakly regular if there exists a complex number 
u with \u\ = 1 such that up~^Sf(b) = u?*^ for all b E F p n, where /* : ¥ p n — ► ¥ p is a function. 
In such a situation, the function /* is also a weakly regular bent function and it is called the 
dual of /. 

Binary bent functions are usually called Boolean bent functions, or simply bent functions. 
These functions were first introduced by Rothaus [21] in 1976. Later Kumar, Scholtz, and 
Welch |20j generalized the notion of a Boolean bent function to that of a p-ary bent function. 
All known p-ary bent functions but one are weakly regular. The only known example of bent 
but not weakly regular bent function was constructed by Helleseth and Kholosha [12j . 

Bent functions, and in general, p-ary bent functions are closely related to other combinatorial 
and algebraic objects such as Hadamard difference sets in (F2«,+) [8], relative difference sets 
[23] . planar functions, and commutative semifields j6j HJ [26]. For future use, we explicitly 
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state the relationship between planar functions and p-ary bent functions here. A function 
F : F p n — ► Fpn is said to be planar if the function from F p n to ¥ p n induced by the polynomial 
F(X + a) — F(X) — F{a) is bijective for every nonzero a G ¥ p n. The following lemma gives the 
relationship between planar functions and p-ary bent functions. 

Lemma 1.1. Let F : ¥ p n — > ¥ p n be a function. Then F is planar if and only if Ti n (aF(x)) is 
p-ary bent for all a G ¥* n . 

The proof of the lemma is fairly straightforward, see [5j. Almost all known planar functions 
F : F p n — ► F p n are of Dembowski-Ostrom type, namely the corresponding polynomials F(X) 

have the form F(X) = j 0"ijX pl+p:> G F p n[X]. The Coulter-Matthews planar functions are 
special since they are not of Dembowski-Ostrom type. These planar functions can be defined 
as follows. Let n, k > 1 be integers such that gcd(fc,n) = 1. Then the function F : ¥%n — ► F3n 
defined by 

3^ +1 

F(x) = x~^~ Vx G F 3 n 

3^ +1 

is planar. Thus by Lemma 11.11 Tr n (ax~ ~ ) is 3-ary bent for every nonzero a G Fan. These 
bent functions are usually called the Coulter- Matthews bent functions. It is conjectured that 
the Coulter-Matthews bent functions are weakly regular [12], [19]. (Strictly speaking, it was 
only stated as an open problem in [T2] to decide whether the Coulter-Matthews bent functions 
are weakly regular or not. But most people believed that these functions are weakly regular 
bent.) In a recent paper [19] . it was proved that the Coulter-Matthews bent functions are weakly 
regular in two special cases. We confirm the conjecture in this paper. Therefore our first result 
in this paper is 

Theorem 1.2. Let n,k > 1 be integers such that gcd(k,n) = 1. Then the bent function 

3^ +1 

Tr n (ax~ a - ), a G Fg„ ; is weakly regular bent. 

Helleseth and Kholosha [12] surveyed all proven and conjectured classes of p-ary monomial 
bent functions / : F p n — > F p of the form f(x) = Tr n (ax d ), where a G F* n , d is an integer, and p 
is odd. (See Table 1 in [T2]-) In that paper, besides mentioning that it is an open problem to 
decide whether the Coulter-Matthews bent functions are weakly regular, the authors also made 
the following conjecture. 

Conjecture 1.3. (|12j) Let n = 2k with k odd. Then the ternary function f mapping F 3 n to 
F3 and given by 

/(x) = Tr n (ax^ +3fc+1 ) 

3 fc + l 

is a weakly regular bent function if a = £ 4 and £ is a primitive element of ¥3™. Moreover, for 
b G ¥3™ the corresponding Walsh transform coefficient of f(x) is equal to 

( 3 fe + l \ 

S f (b) = -3 k u; ±Trk \^) 
where L is a primitive fourth root of unity in F 3 n . 

We will show that the ternary functions in the above conjecture are indeed weakly regular 
bent. It still remains to prove the second part of the conjecture. We state our second result in 
this paper as 

Theorem 1.4. Let k be an odd positive integer, and let n = 2k. Then the ternary function 
f : F 3 n — > F3 defined by 

f{x) = Tr n {ax— +3 +1 ), Vx G F 3 », 
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3 fc + l 

is a weakly regular bent function if a = £ * and £ is a primitive element of F^n . 

Our proofs of Theorem ll.2l a.nd ll.4l rely on a lemma of Hou [T7]. The idea is of a p-adic nature, 
and it has been used successfully a few times in the literature (see for example, |15| . [9]): Given 
a function / : F p n — > F p , it is usually difficult to compute the Walsh coefficients Sf(b) explicitly; 
sometimes, even computing the absolute values of Sf(b) is difficult. However, such difficulties 
can sometimes be bypassed by divisibility considerations. To this end, we first introduce Gauss 
sums, Stickelberger's theorem on Gauss sums, and Hou's lemma. 

2. The Teichmuller character, Gauss sums, Stickelberger's Theorem, and Hou's 

LEMMA 

Let p be a prime, q = p n , and n > 1. Let oj = e p be a primitive complex pth. root of unity 
and let Tr n be the trace from F q to TLjpTL. Define 

which is easily seen to be a nontrivial character of the additive group of ¥ q . Let 

x ■ K - c* 

be a character of F* (the cyclic multiplicative group of F q ). We define the Gauss sum by 

aeF* 

Note that if xo is the trivial multiplicative character of F g , then g(xo) = ~ 1- Gauss sums can be 
viewed as the Fourier coefficients in the Fourier expansion of V'If* in terms of the multiplicative 
characters of F q . That is, for every c G F*, 

where X denotes the character group of F* 

One of the elementary properties of Gauss sums is [5J Theorem 1.1.4] 

g(x)g{x) =q, if x xo- (2) 

A deeper result on Gauss sums is Stickelberger's theorem (Theorem 12.11 below) on the prime 
ideal factorization of Gauss sums. We first introduce some notation. Let a be any integer not 
divisible by q — 1. Then there are unique integers ao, • • • , a n -i with < < p — 1 for all i, 
< i < n — 1 such that 

a = a + aip H h a„_ip n ^ 1 (modg - 1). 

We define the (p-ary) weight of a (mod q — 1), denoted by w(a), as 

w(a) = a + a\ H + a„_i. 

For integers a divisible by g — 1, we define w{a) = 0. 

Next let i q -i be a complex primitive {q — l)th root of unity. Fix any prime ideal p in Z[^ g _i] 
lying over p. Then Z[£ g _i]/p is a finite field of order q, which we identify with F q . Let Wp be 
the Teichmuller character on F q , i.e., an isomorphism 

Wp :F*^{U g -i4-i,---,Cil 

satisfying 

uip(a) (mod p) = a, (3) 
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for all a in F*. The Teichmuller character Up has order q—1; hence it generates all multiplicative 
characters of ¥ q . 

Let be the prime ideal of Z[£q_i, £ p ] lying above p. For an integer a, let u<^(g(ujp a )) denote 
the *P-adic valuation of g(ujp a ). The following classical theorem is due to Stickelberger (see [211 
p. 7], [3, p. 344]). 

Theorem 2.1. Let p be a prime, and q = p n . Let a be any integer not divisible by q — 1. Then 

vy(9(up a )) = w(a). 
Next we state Hou's lemma using the notation developed in this paper. 

Lemma 2.2. (|17j) Let f : ¥%n — > F3 be a function. We have 

(i) f is a ternary bent function if and only if V2,{Sf{b)) = ^ for all b G ¥3™. 

(ii) f is a weakly regular bent function if and only if /(O)) = ^ and u^(Sf(b) — S*/(0)) > ^ 
for all b G Fg n . 



3. Proofs of the Main Results 

We will first prove Theorem 11.21 The proof is relatively easy since most of the work has been 
done in [TTj . 

2-rri 

Let F : ¥ p n — > ¥ p n be a function, and oj = e » be a primitive complex pth root of unity. In 
[TT] . the following notation was introduced: 

S F (a,b)= Y^^ Vn{aF{x)+bx) 

and 

K = Q(w), W£ = K I < i < p - 1}, W£ = {-a;* | < * < p - 1}. 

Note that Wk = W% U is the group of roots of unity in K* . We quote the following theorem 
from |llj . 

Theorem 3.1. (|llj) Let q be an odd prime power. Let F be a planar function on ¥ q with 
F(0) = and F(—x) = F{x) for all x G ¥ q . Then we have 



J2s F (a,0) = 



a£F* 

S F (a,b) = S F {a,bf=q 2 
a,b<=W q a,b€F q 

ii ) For all a G F* and b G ¥ q 

S F (a, b) = £ a ,b(Vp*) n , s a)b G W K , 

where p* = (—1) 2 p. Moreover, if F is of Dembowski-Ostrom type or F is the Coulter- Matthews 
planar function, then 

e afi G {±1} and e a>b • e aj0 G W£. 
We are ready to give the proof of Theorem 11.21 
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Proof of Theorem II. 21 Let F : W^n — > W^n be defined by F(x) = x~ ~ , Vx G F^n. For any 

3^ +1 

nonzero a G F3n, let / : — > ¥3 be defined by f(x) = Tr n (ax~2~), Vx E F3«. By Lemma 1231 
it suffices to show that z/ 3 (5/(0)) = n/2, and for every i)£F|„, i/ 3 (5/(6) - 5/(0)) > §. 
As i 7 is a planar function on F3™, by Theorem 13.11 

5/(0) = S F {a,0) = e afi (V^) n . 

Therefore 1/3 (5/(0)) = f . 
For any b G Fg„, we have 

5/(6) - 5/(0) = J] w Tr n (aF(x)-fez) _ ^ ^Tr^aF^)) = g p ^ _q _ ^(^Q). 

By Theorem 13.11 we have 

S F (a, -b) = e a ,_ fe (V^3) n , 5 F (a, 0) = e a , (V^3) n , 

and 

e afi G {±1} and e a _ 6 • e afi G W^. 

Therefore, 

5/(6) -5/(0) = (V=3) n (e ,_ b - e£t , ) 
= (V=3) n e„, (^-1), 

where a; is a complex primitive cubic root of unity, and j G {0, 1, 2}. 

Fix any prime ideal p in Z[£ g _i] lying over 3. Let ^3 be the prime ideal of Z[£ 9 _i,u;] lying 
above p. Since iAp(3) = 2, we see that 

^(5/(6) - 5/(0)) > - <=> ^(5/(6) - 5/(0)) > n. 

Note that for j = 0, we have v^(uj j — 1) = 00; and for j = 1 or 2, we have ^(u;- 7 — 1) = 1. As 
V< $W~ 3) n = n > we have 

zAp(5/(6) - 5/(0)) = i*p(c^ - 1) + iAp(\/=3) n > n. 
Hence we have shown that 1^(5/(6) — 5/(0)) > S. The proof of theorem is now complete. | | 

Remark 3.2. It was shown in p2] that if f : F™ — ► F p is a weakly regular bent function and 
(p — l)n > 4, then 

deg(/) < (4) 

In |17j . a/ier £/ie proof of the bound in Q), it was mentioned that when p and n are both odd 
with n > 3, it is not known if the bound in |^) is attainable. Let n > 3 be an integer. Then the 

Coulter- Matthews bent functions Tr n (ax 2 ) has degree n. Therefore by Theorem li.ffl i/tese 
functions provide examples of weakly regular bent functions of degrees attaining the bound in 

We now make some preparation for the proof of Theorem 11.41 Let Cj (i = 0,1,2,3) denote 
the cyclotomic classes of order four in the multiplicative group of F p n, i.e., Cj = {£ 4 *+* | t = 
0, . . . , / — 1}, where £ is a primitive element of F p n and / = — . Throughout this section all 
expressions in the indices numbering the cyclotomic classes are taken modulo 4. 



Lemma 3.3. ( [13] ) Let p be an odd prime with p = 3 (mod 4) and let n = 2k with k odd. 

„k_ 

classes of order two in the multiplicative group of¥ p k. Moreover, Co andC2 map onto the squares 
and C\ and C3 onto the non-squares in F* fe . 



Raising elements of Ci to the (p k + l) th power results in a — to-1 mapping onto the cyclotomic 
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Proof: Take the following polynomial over ¥ p that factors in ¥ p k as 

p( z ) = Z^ 1 - l = (z*)^- 1 - 1 = Yl (** - a) 



feii 

where t = p J . The roots of p(z) are exactly all the elements from Cq. Therefore, it can be 
concluded that raising elements of Co to the power of t results in a t-to-1 mapping onto the 
multiplicative group of ¥ p k. In general, raising elements of C{ = £*Co to the t th power results in 
a t-to-1 mapping onto the coset £ 4 *F* fc . 

Let rj = £P k+1 be a primitive element of ¥ p k. When k is odd, the cyclic subgroups generated 
by rf and by ry 4 are equal since they have the same multiplicative order equal to 

ord (n 4 ) = — ——. — — = — - — = ord (r? 2 ) . 

v ' ' gcd(p k - 1,4) 2 w ' 

Thus, raising elements of F* fe to the fourth power is a mapping onto the subgroup generated by 

rj 2 and since both a and —a produce the same image for any a £ F* fe , this is a 2-to-l mapping. 

Also note that £ 4 ** = £*(P fc+1 ) = rf . Therefore, combination of these two mappings that is 

h —fell 

equivalent to raising elements of C% to the power of At = p + 1, results in a ^ to-1 mapping 

onto the cyclotomic classes of order two in ¥* k . Moreover, Co and C2 map onto the squares and 
C\ and C3 onto the non-squares in F* fc . | | 

Lemma 3.4. ([13]) Let p be an odd prime with p = 3 (mod 8) and let n = 2k with k odd. Then 
for any c E F* fc and z G ¥* n , and any cyclotomic class Cj (j = 0, 1, 2, 3) 

J^(czv k y) = \ 32^1, if Z € C j+2 

yeC . \ -S-±±, otherwise . 

This lemma is a direct consequence of part (1) of the following general theorem [22J on uniform 
cyclotomy. See also [2j. 

Theorem 3.5. (|22j) Let q = p n be a prime power, let e > 1 be a divisor of q — 1 and let Ci, 

< i < e — 1, be the cyclotomic classes of order e. Assume there exists a positive integer j 
such that p 3 = — 1 (mod e), and assume j is the smallest such integer. Moreover assume that 
n = 2j7. Then the cyclotomic periods r]i = YlxeC oj Trn ^ are given as follows: 

(1) If 7,2?, ^-^r- are all odd, then 

( e _ i)pn _ 1 -l-pn 
m = , m = ,1 + e 2. 

2 e e 

(2) In all other cases 

-l-(-l)T(e-lW 7 (-1)V 7 -1 / 

e e 
Lemma 3.6. ([13]) Let p be an odd prime with p = 3 (mod 8) and let n = 2k with k odd. For 
any c £ F p fe and j = 0, 1, 2, 3 denote 

T/ien /or any j 

p fe + 1 
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where the bar over a complex value denotes the complex conjugate and the indices are taken 
modulo 4. 

Proof: First, it is easy to see that for any nonzero c E ¥ p k 

-i I rji , rjl I rri , rri ST^ (c^ + l)^" + 1 - C ) 

1 + T + T x + T 2 + T 3 = 2^ w v ; 

= ^-Tr fc (e) £ ^M^ 1 ) ® u --* k (c) ( {p k + l) £ U^-M + l 



y£W p n 



\ 



p fc w -Tr fe (c) (5) 



where (*) holds since raising elements of ¥* n to the (p k + l) th power is a (p k + l)-to-l mapping 
onto F* fe as proved in Lemma 1]. 

Let Ci ■ Cj denote the strong union of C and Cj, i.e., the set of elements of F p n that can be 
represented as a sum of two addends from Cj and Cj, respectively, and counting the multiplicity 
of such a representation. Thus, Cj • Cj consists of the elements £ 4i+ * + £^ d+ i = £ 4d +j(i _|_ 
£4(t-d)+i-i) for alH, d = 0, . . . , / - 1. Therefore, 



Cj • Cj — Q—j) 

= (i - j, 0)Cj U (t - j, l)C j+ i U (* - j, 2)C j+2 U (i - j, 3)C i+3 

= (*- -j)C U (i - - j)C x U (i -i, 2 -j)C 2 U (1-^,3-^(73 (6) 

if i ^ j and otherwise, since —1 E Co, 

C • C = (0, -i)C U (0, 1 - i)Ci U (0, 2 - i)C 2 U (0, 3 - i)C 3 U /{0} (7) 



where denotes the cyclotomic number that is equal to the number of elements x E Cj such 
that x + 1 E Cj and /{0} denotes the zero-element of F p n taken with the multiplicity /. The 
components i, j in cyclotomic numbers are taken modulo 4. 

Also denote Cj = {x E Cj | 1 + x E Cj} (obviously, \Cf\ = In our case — 1 E Co and 

we can prove that = Cm). Indeed, the elements of Cj correspond to the pairs (t,d) with 
t,d E {0, ...,/- 1} that satisfy the equation £ 4t+i + 1 = ^ d+j . Multiplying both sides of the 
equation by — 1 = £ 4 ' we get the equivalent equation ,c 4 ( d +0+j + 1 = £ 4 (*+')+* whose solutions 
give the elements of Cj. Therefore, for any i E {0, 1, 2, 3} we have 



£ tt4) _ _ icy u a u a u c?i _ { -_/■ _ 

j=0 j=0 
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since —1 + 1 = that does not belong to any C$. A good introduction into this subject can be 
found in [25J. Now for i,j £ {0, 1, 2, 3} and i ^ j we evaluate the product 



Ci,y£Cj 
Ci,y£Cj 

^Tr k (c(xP k + 1 -yP k + 1 + (x+y)P k +(x+y)^ 

Ci,yeCj 

^ ^k(c((z-y)P k +^yP k +^+zP k +z)) 
G.Ci-Cj 

^ u ^k(c{z+l)P k +t-c) ^-Tr k (c{zyP k +zP k y)) 
G.Ci-Cj 

y2 w Tr fe (c(z+l)P k+1 -c) ^-Tr„ (czP k y) 



xGd,y&Cj 

E 

x£Ci,y£Cj 



J2 J2 U M C ^ P +1 - C ) £ T^J ( 8 ) 

t=0 z&Ct r&C t Z i 



where z = x + y £ C\- Cj and the value of y is uniquely defined by z. Therefore, if z = x + y £ Ct 
with x £ Ci and y £ Cj then z = y(l + xy^ 1 ) with xy^ 1 £ C^Zj- By ©, the multiplicity of 
z £ C t in Cj • Cj is equal to (i—j,t—j) = | CjZj \ ■ Thus, for a fixed z £ C t the set { j^p \ r £ C*Zj } 
contains all (i — j,t — j) values for y £ Cj that correspond to this z taken with the appropriate 
multiplicity (i — j,t — j) as a member of Ci ■ Cj. For i = j we just have additionally to consider 
the zero-element of ¥ p n that is found in Cj • Cj with the multiplicity / (see (|7J)). Then 

T ^ = E E uM c( * +1)pfe+1 - c ) ^ T <- pk ^) + f • (9) 



t=0 zGCt reC,^ 



Let t, j G {0, 1, 2, 3} and z £ Ct be fixed. Then for any i £ {0, 1, 2, 3} and r £ C\_ 3 , we have 



j^p £ Cj. Further, Yli=o = X^=o(*>^ ~~ j) * s e Q ua l to |Ct_j| = / if t ^ j and is equal to 

| Co | — 1 = / — 1 otherwise. Since the cardinality of Cj is /, we have proven that 



r eCI, i = 0,l,2,3 



1 + r 1 ^-J' "^'^7 \ C,\{z}, otherwise 
since Therefore, for any t,j £ {0, 1, 2, 3} and z £ Ct 



E E 

'=° r6C*'~ J 
»— J 



-Tr„ I czP k 

UJ 



> S !/ 6C j \{4 w ^' , ^ ! 'l otherwise. 



(10) 
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Note that since n = 2k and p = 3 (mod 8) then (p n — l)/2 = (mod 4) and — 1 = £ 2 g 
Co- Therefore, — Cj = Cj and 



Making use of Lemma 13.41 we get that 

(T + T 1 + T 2 + T 3 )Tj 
3 



<3 EE wTrfc ^ +1)pfc+1 "^E E uT Tr "Ki^ +/ 

t=0 z€Ct i=0 r g(7*~? 



»— j 



3 

CP ^ ^ w Ti fc (c(*+l)^ +1 -c) w -T!r„(c*pV 



t=0 z6C*t yGC. 



_^ a;Trfc ( C ( Z+ l F +1 - C j^-Tr„(c zP+1 j +/ 



mi p fe + 1 



(T + Ti + T 2 + T 3 ) + /T j+2 — Tj + f . 



4 



Now, using ©, we get 



-p k co-^T] = (^ w -^(«) + l)L_+l + pfcr i+2 + E^l an d 
-2> = a; Tr ^ c )r j+2 + ^±i( W Tr ^ c ) + l) 
that was claimed. Q 



Lemma 3.7. ([121 El) Let n = 2k and a £ F p n for an odd prime p. Then the function f 
defined by f(x) = Tr n (a^ '+ 1 ) Vx e ¥ p n is bent if and only if a + aP 7^ 0. Moreover, if 
the latter condition holds then f is weakly regular and for b £ F p n, the corresponding Walsh 
transform coefficient of f is equal to 

S a (b) = -p k uj . 

For the proof of this lemma, we refer the reader to ( [12^ [T4"] ) . 

Proof of Theorem II. 4t By Lemma 12.2} it suffices to show that 1^3 (^(O)) = k, and for every 
b G Fg„ , u 3 (S a (b) - 5 o (0)) > § . First we will compute 5 a (0) and S a (b) - 5 a (0). 

Let I = £ * , where I is a primitive 4 th root of unity in ¥3™ (obviously I 2 = — 1). As 
before, let Cj, < i < 3, be the cyclotomic classes of order 4 of ¥ 3 n. Then any x £ C% satisfies 

3 n — 1 i(3 n — 1) . 

x^4~~ = £ 4 = P. Also a 3 = al and Tr^(a) = a + a 3 = a(I + 1). On the other hand, 
Tr£(al) = al- a 3 " I = al + a = o(J + 1) = Tr£(a) since 3 fe = 3 (mod 4) for odd fc. Therefore, 
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s tt (b) - 1 = Yl uj^ ax ^ +3k+1 - b ^ -i = Y.Y. oo Trn{aPxik+1 - hx) 

x& z n i=0 x£d 

= ^ UJ ^k{aix zk+1 -bx-b zk x zk ) + ^ ^ki-aix^ + ^-bx-b^x^) 

xeC'ouCi xeC 2 uG 3 

J2 UJ ^ k (ai(x-l3f k + '-a 1 ^ k +') + J2 w -Tr fc (a 1 (x+/3) 3fc + 1 -a 1 /3 3fe + 1 ) ) ^ 
rzGCoUCi SGC2UC3 

q k 

where a± = a(I + 1)^0 belongs to F 3 fc and b = a\/3 . 
If b = 0, then (3 = 0. Using Lemma |3T3| we have 

Sa(0) = 1+ E + £ 

xGCqUCi XGC2UC3 



W -Tr fe (aia: 3 + 1 ) 



1 + 3fc + 1 ^ (^(ail/) +tl ;-^*(aiy)) = _ 3 * 



Therefore ^ 3 (5 a (0)) = k = n/2. 

a a. n T „■>- „ — „.fl3 k +l -\kt„ „ r- u, 

3 fc 



Next suppose & 7^ 0. Then /3 7^ 0. Let c = ai(3 3h+1 . We have c G F* fc . Assuming that 



/T 1 G Cj (i.e., ind^ 1 )^ j (mod 4)), we have = C i+j for any i G {0,1,2,3}. Now 

making the substitution x = j3y in (|12|) . we have 



Tr fc (c(y-l)3 fc +i-c) _^ V" w ~ Tr^cfe+l)^ + 1 ~c) _ 



5 a(6 ) _ 1 = £ w THMy-D 3 +1 -c) + £ 

3 n -l 

Since n = 2fc, (3™ - l)/2 = (mod 4) and -1 = £^r~ G C . Therefore, -Cj = Q and 



w Tr fe ( C (y-l)3 +1) = ^ w Tr ft ( C (y+l) 3 

yeCi y ec l 



Let Tj (i = 0, 1, 2, 3) be defined as in Lemma 13.61 Then we have 



S a (b) = l + Tj + T j+1 + T j+2 + T j+3 , 
where the bars denote complex conjugation. By Lemma 13.61 we have 

S a (b) = 1 + Tj + T j+1 +T^ + T^~ 3 =(l- w^W) (Tj + T j+1 + ^y^\ ~ 3 fc , (13) 



where 

Tj = Y uj TTk ^ x+1 ^ k+1 - c ^ = Y u/ & »( 2cs8h+1 + CSB ) = (j Tt «(- a ? k+1 + cx '), j = 0,1,2,3. 
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Let 77 be a multiplicative character of W^n of order 4. Then 

.TT n (-cx* k +i+cx) 1 + Vjx) + r] 2 (x) + r? 3 (x) _ 

4 



So 



To = Yl L * 



^(-cx^+^+cx) l-iy{x)-y (x)+ii 1 - i (x) _ 



Tl = E - 

zeF*„ 

« = E 



Tr n (-cx 3k +l+cx) 1 ~ + V ( X )~ V ( X ) . 

w 4 ' 

xSF* 



L 3" 



^ JTr n (-cx3 k +i+cx) 1 + WW ~ V 2 ( x ) ~ WW 



4 



2 ' U 



+ 1 + 1 £ ^-cx^-H*),^). (14) 

zeF|„ 

Tx+T 2 = - w Tr n (- C ^ fe +l+cx) 



2 



4 

i — 1 - — - - - « k 



x&* 3n 



+ 1— ' £ 3 +1 +-) 7? 3 (x) . (15) 



z£F* n 



^+^3 = £ E 



2 ' 



4 

-i- 1 



^eF| n 



+ -L— - £ ^ Tr " ( - ca;3 +1+c:E) ?? 3 (x); (16) 



rrGF^ 



+ r » = § E 



w Tr„(-cx 3fe+1 +cx) 



xGF| n 



+ i±i £ ^"^^^(x) 



x£F* n 



+ Ijl E ^"^^VOt). (17) 
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In the following, we will compute X^xgF* a;Tr ™^ cx ^ +1+cx \ X^eF* wTr ™^ cx3 +1+cx ^r/(x), and 

3^ + 1 ^ ^ 

X^gF* a/ 1 ^ - " 11 +cx ^?7 3 (x), respectively. 
By Lemma 13.71 we have 

V uj^- cx3k+1 + cx ) = V o; Tr " ( " ca:3fe+1+c:r ' ) - w Tr " (0) 
= -3 fc w- Trft ( c ) - 1 = -3 fc w Tr "W - 1. (18) 

3^ 1 

Next we will compute X^gF*„ LU Trn( -~~ cx +cx 'r)(x). 

To simplify notation we write L = Fyi, and ql{x) = Ylxew* x( x ) ujTrn( ' x ^ ■ Then 



3" - I 

With this notation, we have 



x'gL* x£L* 



= 7^rzr^^^2,9L{xx)9L{X2)xl{-c)X2{c) ^ r^xi^ 3 * 4 " 1 ^^) 

^ ' Xi X2 xgL* 

If X2 = Xi 3k+1 Vi then for any x G L*, Xi 3k+1 (x)x2~(x)r](x) = 1. Otherwise 

X! Xi 3 +1 (x)X2~(x)v(.x) = 0. 

xgL* 

Thus, 

£y r " ( - cx3fe+1+c ^(z) = ^3lE^(xi)5L(xT 3fc+1 r ? )xT(-c)xf +1 (c)^(c) 

Xi 

|^ T E^(Xi)5L(xT 3fe+1 ^)xi(-c). 



xGL* Xi 

77(c) 



XI 

So 



to TT "(- cx3k+1+cx ^(x) 



3 n -2 



= ^TT7 2^ 5i K >9l(u p )u p (-c), (19) 

where p is a prime ideal in Z[£ 9 _i] lying above 3 and ujp is the Teichmiiller character of L. 
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Similarly, we can compute YlxeL* ui Trn (~ cx3 +1+cx ^rf'{x) as follows: 
E u/M— 3fc+1+ca V (*) 

~h2 ^^ 5fL ^ 1 ^ L ^ X2 ^~ C ^ C ) X] Xi 3 ' !+1 (^)X2(a;)»7 3 (^) 



xeL* 



(3™ - l) 2 

^E^(xiK(xr 3fe+1 ry 3 )xi(-c) 

Xi 

7,3 ( c ) - f .-6\- / .(3 fe +l)6H 



Qn 

d " 6=0 

If f3~ l e C , then by (USD, fill), (US}, (USD and J2DJ, we have 
S a (6) = (l-u^)(T + T 1 + ^^)-3 fe 

= (l-^( c ))[-I 3 ^ Tr "W + y 

1-1 7?(c) _ fc ( 3 fc + l)fe + 3^ _ 

+ 4 3 »-l E 5iK H (" c ) 

6=0 



1 + i 7? 3 (c) ^ _ fe (3 fc +l)6+ 3(3 ^ 1} _ b , 



6=0 



Since S a (0) = — 3 fc , we have 

S a (b)-S a (0) = (l- u ,^)[~3 k u Tr ^ + ^ 



+ 4 3 n_ 1 E K (-°) 

6=0 

l + ir/ 3 (c) ^ _ 6 ( 3 fc + i) 6+ 3(3 2 *-i) 

6=0 



Similarly, when j3 1 S Ci, we have 



3 A ' 



S a (b)-S a (0) = (l-u; T ^)[-h k u; T ^+ } 



3 n -2 ,2k 



-j ~ 1 *?(<0 / -&\ f (3 fc +l)6+^- _ 6 



3 ZK -1 



6=0 



+ 4 3 »_! E K Ml- 

6=0 
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when S C2, we have 

5 o (6)-5 a (0) = (l-^( c ))[-I 3 fe u; 1> "( c ) + y 

-l + i 77(c) %^ _ b (3^+1)6+3^=1 
+ 4 gn.x 2^ )9l(u p )u) p (-c) 

6=0 

r/ 3 (c) \— 2 _ 6x (3 fc +i)b+ 3(32 *;~ 1) , _ 6 , ., 

+ 4 3 l_i Lg^HVK H (-c)], (24) 

6=0 



and when 1 G C3, we have 



A- 



S a (b)-S a (0) = (l-u; T ^)[-h k u; T ^+ 2 

l + i 77(c) V^ 2 _ b ( 3 fc+i)fe+3!^i , 

+ 4 3»_x H (" c ) 

6=0 

1-i r? 3 (c) _ b (3 fc +i)6+ 3(a2 ! : ~ 1 \ _ 6 , A1 /nc s 

+ 4 on_ i 2^ )9L(o>p 4 H (-c)]- (25) 

6=0 

Let *P be the prime ideal of Z[£ g _i,£ 3 ] lying above p. Since zAp(3) = 2, we see that 

71 

^(S a (b) - S a (0)) > - <=> iAp(5 a (6) - 5 o (0)) > n = 2fc. 

Note that u; Trfc ( c ) = 1, u or oj 2 . Hence i*p(l — u; Trfc ( c )) = 00 or 1. Using the expressions of 
S a (b) - S a (0) in {22]), {23]), {24]), and {25]), we see that iAp(S a (6) - S a (0)) > n if 

^ £ 9L^ h )g L (uf +1)6+ ^)a; p - b (-c) > 2fc (26) 



and 



6=0 



A> (3 fc +l)6+ 3(32fc ~ 1) 



zAp £ 5i (^- 6 ) 5i (^ 4 )^ h {-c) > 2fc. (27) 

V 6=0 / 

By Theorem 12.11 and the fact that <?l(xo) = ~~ 1> where xo is the trivial multiplicative character 
of F^n, we have for any 6, < b < 3 n — 2, 

i*p ( 5L (^ fe ) 5i (4 3fc+1)6+£ ^ i )^ P 6 (-c)) = w(b) + u; (-(3 fc + 1)6 - ^1 

and 

3 (3 2k - 1) 



!*p ^ L (^ p fe ) 5i (4 3fc+1)fe+3( ' ^K 6 (-c)J = «;(&) + «> (^-(3 fe + 1)6 

Therefore if we can prove that for each 6, < 6 < q — 2, 

t 

"4 

and 

7 }fc 3(3 2fc -l 



/ o2k _ -1 ' 

w(6)+u> -(3 fc + l)6 — )>2k (28) 



w(6)+w -(3 fe + l)6 K — L \>2k, (29) 



PROOFS OF TWO CONJECTURES ON TERNARY WEAKLY REGULAR BENT FUNCTIONS 



15 



then V3(S a (b) — S a {0)) > n/2; and it follows that / is weakly regular bent by Lemma 1231 We 
will give proofs of ([28]) and (j29|) in the next two sections, which will complete the proof of 
Theorem O □ 

4. THE p-ARY MODULAR ADD-WITH-CARRY ALGORITHM 

In a sequence of papers [10] [15] [16] [I] a systematic method has been developed to derive 
binary weight inequalities. Here we generalize this approach to p-ary weight inequalities. As 
in the binary case, the idea is to analyze the digit-wise contributions to the weights in the 
inequality using the carries generated by a modular add-with-carry algorithm for the p-ary 
numbers involved. Essentially, this approach enables the analysis of the global properties of the 
weights in terms of local, digit-wise contributions. 

Then, these local contributions can be analyzed for all word lengths simultaneously in a finite 
weighted directed graph that models these local contributions. This graph has the property that 
valid computations are in one-to-one correspondence with directed closed walks in the graph. 
Hence the original weight inequality gets transformed into a bound on the sum of the arc-weights 
of directed closed walks in this graph as a function of the length of the walk. In principle, such 
a bound can then be verified by inspection, either directly (if the graph is sufficiently small) or 
with the aid of a computer. Alternatively, a detailed analysis of the properties of the graph, 
possibly with the aid of a computer, can be used to devise a mathematical proof (although such 
proofs can be quite tedious, see e.g. [15]). 

We start with the derivation of the p-ary modular add-with-carry algorithm. Our aim is to 
prove the following theorem. 

Theorem 4.1 (Modular p-ary add-with-carry algorithm). Let aS l \ . . . be m integers, and 

let the integer s satisfy 

s = + i 2 a (2) + • • • + t m a (m) mod p n - 1 

for nonzero integers t\, t2, ■ ■ ■ , t m . Suppose that s and . . . , have p-ary representations 

s = Y17=o s iP l an d a<y ^ = ^27=0 a i^P l f or j = 1, ... ,m, where the p-ary digits Sj and a~p are 
integers in {0, 1, ... ,p — 1}. Then there exists a unique integer sequence c = c_i, cq, . . . , c n _i 
with c_i = c n _i such that 

m 

pc i + s i = c i - 1 +Y, t A j) (0<i<n-l). (30) 

3=1 

Moreover, if we define 

m m 

3=1 3=1 

tj>0 tj<0 

then t- — 1 < Cj < t+, and furthermore 

t- <Ci<t + -l (31) 

for i = 0, . . . , n — 1 provided that mod p n — 1 for some j = 1, . . . , m. As a consequence, 

the value w(c) = cq + ■ ■ ■ + c ra _i, the weight w(s) = Sq + • • • + s n _i of s, and the weights 

w(aW) = a ( j) + ■■■ + ojflj of the satisfy 

m 

(p-l)w(c) =Y^tjw(a®)-w(s). (32) 

3=1 
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We will usually refer to the Sj and Cj as the (p-axy) digits and carries for the computation 
modulo p n — 1 of the number s. We emphasize that the non-obvious part of Theorem 14.11 is the 
existence of a carry sequence with c n _i = c_i: otherwise (I30p represents the ordinary p-avy add- 
with-carry algorithm. To stress the periodic nature of this modular add-with-carry algorithm, 
we will often consider all indices modulo n. 

There are various ways to prove this theorem. Here we will derive it from the following simple 
technical lemma. 

Lemma 4.2. Let ro,r\, . . . , r n -\ be an integer sequence. For all j, write 

n-l 

i=0 

where the indices are to be interpreted modulo n. Then there exists an integer sequence c = 
c_i, Co, ci, . . . , c n _i with c_i = c n _i such that 

pci = ri + Cj_i (33) 

for i = 0, . . . , n — 1 if and only if r(0) = mod p n — 1. In that case, we have 

Cj _! = r(j)/(p n - 1) (34) 

for j = 0, ...,n— 1; in particular, the solution is unique. Moreover, the "weights" w(r) = 
7*0 + • • • + r n _\ and w(c) = Co + • • • + c n _i o/ r and c satisfy 

(p — l)w(c) = w(r). (35) 

Proof: Suppose that ([33]) holds for z = 0, . . . , n — 1, with c_i = c n _i. Write 

n-l 

c(j) = X] Ci +^' 
i=0 

where the indices of c are to be interpreted modulo n. Then 

n-l 

= r(j) + pc(j) + Cj_i - p n c j+n -i 
= r(j) +pc{j) - c j ^ l (p n - 1), 

hence r(j) = Cj-i(p n — 1) for all j. So r(j) = mod p n — 1 and Cj_i = r{j)/(p n — 1) for all j; 
in particular, we have that r(0) = mod p n — 1. 

Conversely, suppose that r(0) = mod p n — 1. Then obviously p-'r(j) = r(0) = mod p n — 1, 
so that r(j) = mod p n — 1 for all Hence the sequence c_i, cq, . . . , c n _i defined by (f34l) is 
an integer sequence, with c_i = c n _i by definition, and it is easily verified that this sequence 
indeed satisfies (f33|) for i = 0, . . . , n — 1. Finally, the equation ([35]) follows directly from ([33]) by 
summing ()33[) for « = 0, . . . ,n — 1. | | 

Remark 4.3. If we associate polynomials r(x) = ro + r\x + • • • + r n _\x n ~~ x and c(x) = cq + 
cix + • • • + c n _ix n_1 iwit/i f/ie sequences r and c, then (3^) can be read as 

r{x) + (x — p)c(x) = mod x n — 1. 

7/p is not a zero of x n — 1, that is, if p n ^ 1, then for each r there is a unique solution c. Since 
7(z) = (p n_1 +p n ~ 2 x H +px n ~ 2 + x n_1 )/(p n — 1) satisfies 

(p — x)j(x) = 1 mod x n — 1, 
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the solution c is given by 

n-l 

c(x) = rj r y{x)x l . 
This approach provides an alternative proof of the lemma. 

Proof of Theorem I4.lt Define rj = — Sj + Y^,j=i tj a i f° r * = 0, . . . , n — 1. Since 

k 

r(0) = -s + J] i,-a W) = mod p n - 1, 

3=1 

the existence and uniqueness of the carry sequence c_i, . . . , c n _i satisfying ([50]) . as well as the 
relation (|32|). follows from Lemma 14.21 To obtain the bounds on the carries Cj, simply note that 

(p n - l)t_ - (p n - 1) < r(j) < (p" - l)t + 

holds for all j. Moreover, since all tj are assumed to be nonzero, if equality holds in either of 
these bounds then s and each is equal to modulo p n — 1. Q 

5. The weight inequalities 

We will now use Theorem 14.11 for a local analysis of the weight inequalities (|28p and (|29p . We 
begin by analyzing the ternary representations of the two constants 

u = (3 2k - 1) /4, v = 3(3 2k - l)/4 (36) 

occurring in (f28j) and (f29|) . Write 

z = (3 2fc -l)/8. 

Lemma 5.1. The numbers z,u,v are all integers, with < z,u,v < 3 2k — 1, and u = 2z, 
v = 3u, and 3u = —u = v mod 3 2k — 1. Moreover, if z = Z2k-\ • • • Zo> u = u 2k—l ' ' ' u o> an d 
v = V2k—i ■ ■ ■ v o are the (unique) 3-ary representations of z, u, and v, respectively, then 

Z2i = 1, =0, Ui = 2Zi, Vi = Ui-l. 

In particular, w{u) = w(v) = 2w(z) = 2k. Finally, if k is odd, then 3 k u = v and 3 k v = u 
modulo 3 2k — 1. 

Proof: By definition, z = (3 2k — l)/8 = l + 3 2 + -- - + 3 2fc_2 , so z is integer, and hence u = 2z 
and v = 3u are also integers. Since also 0<z<u<v< 3 2k — 1, their 3-ary representations are 
unique and as described in the lemma. This immediately implies that w(u) = w(v) = 2w{z) = 
2k. Next note that 4n = u + v = 3 2k — 1 = mod 3 2fc — 1; hence 3u = —u = v and 3v = —v = u 
modulo 3 2fc — 1. As a consequence, if k is odd, then 3 k u = 3u = —u = v mod 3 2fc — 1 and 
3 k v = u mod 3 2k - 1. □ 

Now let b be any integer. Suppose that k is odd. Then 3 k u = v by Lemma 15.11 Hence if s 
satisfies 

s = -{3 k + l)b-u mod 3 2k - 1, 

then t = 3 k s satisfies 

t = -(3 k + l)b - v mod 3 2k - 1. 
Now the ternary representation of t is just a cyclic shift of that of s, hence w(s) = w(t) (this is 
also correct if s = t = mod 3 2fc — 1), and so the two weight inequalities (|28|) and (|29|) are in 
fact equivalent. 

We want to prove these two weight inequalities by analyzing the contribution to the weights 
from individual ternary digits of b. To this end, we will apply Theorem 14.11 to the addition 
s = —b — a + v mod 3 2k — 1, where a = 3 k b, with the aim to prove the weight inequality 



18 



HELLESETH, HOLLMANN, KHOLOSHA, WANG, AND XIANG 



w(b) +w(s) > 2k. (For technical reasons, we will prefer this form of the addition, which has the 
same outcome s as the earlier one since —u = v mod 3 2k — 1). However, the i th digit = 6j + / c 
(indices modulo 2k) of a and the i th digit b{ of 6 are entirely unrelated, so a straightforward 
local analysis is doomed to fail. This is a standard problem when investigating p-ary weight 
inequalities, see for example several cases in [15]. Fortunately, there is a standard solution. First, 
use the relations between the numbers involved to derive other, equivalent weight inequalities, 
typically by multiplying the relevant addition by a suitable power of p. Then forget the relation 
between the numbers, but analyze the resulting weight inequalities (in fact, their addition) 
simultaneously. This approach in general results in a generalisation of the original weight 
inequality. 

For the case at hand, the generalization suggested by this approach turns out to be the 
following. 

Theorem 5.2. Let k be any positive integer, and let u and v be defined as in A36\) . For any 

integers a and b, if s and t satisfy 

s = —a — b + v, t = —a — b + u mod 3 2k — 1, 

then w(a) + w(b) + w(s) + w(t) > 4k. 

We first show that the original weight inequalities (|28p and (|29p indeed follow from this result. 

Corollary 5.3. Let b be an integer, and let k be odd. Then 

w(b) + w(-(3 k + 1)6 - {3 2k - l)/4) = w(b) + w(-(3 k + 1)6 - 3(3 2fc - l)/4) > 2k. 

Proof: Apply Theorem 15.21 with a = 3 k b. Then w(a) = w(b). Also, since k is odd, 3 k u 
r mod 3 2k — 1 by Lemma I5.lt hence 

3 k s = -3 k (3 k + 1)6 + 3 k v = -(3 k + 1)6 + u = t mod 3 2k - 1, 

so that w(t) = w(s). From the theorem, we now conclude that w(b) +w(s) = w(b) +w(t) > 2k, 
as claimed. □ 

Proof of Theorem 15. 21 Let s and t be defined as in the theorem, and write n = 2k. Assume 
that a, 6, u, v, s, and t have ternary digits <Xj, 6j, Uj, Vi, Sj, and t{, for i = 0, . . . , n— 1. According 
to Lemma 15. 11 we have that U{ = (indices modulo n) and V2i = 0, U2i— l = 2, for all i. Now 
apply Theorem 14.11 to the defining additions for s and t. In both cases, t+ = 1 and t_ = 2, 
hence there are carry sequences cq, . . . , c n _i and do, ... , d n -\ with c_j = c n _i, d_i = and 
— 2 < a, di < for all i such that 

3ci + Si = -di -bi + Vi + Cj_i (37) 

3dj + tj = -aj - 6j + + (38) 

for all i = 0, ... ,n — 1. Moreover, 2w(c) + w(s) = 2w(d) + w(t) = —w(a) — w(b) + w(v) = 
—w(a) — w(b) + 2k. Using these relations, we see that the weight inequality in the theorem is 
equivalent to 

w(a) +w(b) + 2w(c) +2w(d) < 0. (39) 
In order to analyze the contribution of the individual ternary digits ctj, 6j to the sum of the 

weights in the left hand side of (|39p . we construct the following labeled directed graph G. 
The graph G will have a vertex (a', 6', d , d' , v') whenever a', b' £ {0, 1, 2}, c', d' £ {-2, -1, 0}, 

and v' G {0, 2}, and a weighted directed arc 

(a ,b ,c ,d ,v ) — ► (a ,6 , c , a , f ) 

whenever v" = 2 — v' , 

s' = -a' -b' + v' + c'- 3c" G {0, 1, 2}, t! = -a' - b' + v" + d' - 3d" G {0, 1, 2}. 
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Note that, according to these definitions, whenever (|37p holds there is an arc 

(ai,bi,Ci-i,di-i,Vi-i) — ► {ai+i,bi + i,Ci,di,Vi) 

in the graph. Moreover, since c_i = c n _i and d-\ = d n _i, there is a one-to-one correspondence 
between sets of relations (|37p for i = 0, . . . , n — 1 with corresponding sum of weights w = 
w(a) + w(b) + 2w(c) + 2w(d) and directed walks of length n in the graph for which the sum of 
the weights of the arcs equals w. 

So we are done if we can show that the weight of each directed walk in the graph G is non- 
positive. We will show that in fact all arc-weights are non-positive. To this end, consider an 
arc 

/ / 7 / / t/ /\ a' +b' +2c" +2d" , „ ,// // ,// 

(a,b,c,d,v) — > (a ,b , c ,d ,v ), 

where a', b' G {0, 1, 2}, c', d' , c" , d" G {-2, -1, 0}, v' G {0, 2}, v" = 2 - v', and 

s' = v ' - (a' + b') - 3c" + c' G {0, 1, 2}, i' = - (a' + b') - 3d" + d! G {0, 1, 2}. 
Since s', t' > and c', <i' < 0, we conclude that 

3c" <v' -(a' + b'), 3d" < v" - {a' + b'). (40) 

Now consider the arc weight w = (a' + b') + 2(c" + d"). We have that < a' + b' < 4. Obviously, 
if a' + b' = 0, then w < 0. If 1 < a' + £>' < 2, then since = or v" = 0, at least one of c" or 
d" is negative, and w < again. Finally, if 3 < a' + 6' < 4, then both c",d" < —1, and again 
w < 0. □ 

A close inspection of this proof reveals that in the same way, we can prove the following 
somewhat stronger result. 

Theorem 5.4. Let n be any positive integer. Let u and v be numbers with 3-ary representation 
u = u n -\ ■ ■ ■ uq and v = v n -\ ■ ■ ■ v$, respectively, for which U{ = or = holds for each 
i = 0, . . . , n — 1. If a, b are integers, and s and t satisfy 

s = —a — b + v, t = —a — b + u mod 3 n — 1, 

then w(a) + w(b) + w(s) + w(t) > w(u) + w(v ). 
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